Privacy Policy

CareerButton provides a human-managed job application research, material tailoring, and candidate-authorized submission service for professionals seeking career roles across global and domestic markets. We operate on principles of candidate authorization, accurate representation, and strict data minimization.

This Privacy Policy outlines how candidate data is intended to be handled throughout our conversion funnel, intake assessment, and active search management. Because our public website is currently in a pre-launch release, this document also clarifies the exact live capabilities and limitations of our current technical baseline.

Inquiry submissions accepted by the system are dispatched to authorized CareerButton specialists as transactional emails to evaluate search fit and coordinate your consultation. We operate under strict data minimization:

• No Persistent Intake Database: Consultation inquiries are not stored in an open-access web database, queue, or third-party CRM software. Inquiries exist as secure email records delivered to the specialist desk.
• Encrypted Transmission in Transit: Form submissions travel over standard Transport Layer Security (TLS 1.2+ / HTTPS) to the serverless dispatch handler.
• Failed Delivery Fallback: If email transport fails or is unconfigured, inquiries are not saved or retried automatically. In such instances, the system provides an immediate error notification and directs candidates to our verified direct channels (support@careerbutton.in or WhatsApp).
• Zero Third-Party Commercial Sale: Candidate intake details are never sold, rented, or shared with commercial advertising networks, external recruiters, or data brokers.

Note: Formal statutory data retention schedules and automated deletion mechanisms remain working governance drafts subject to legal counsel approval (DEC-009) prior to full commercial contracting.

Upon full commercial enablement of our intake system, CareerButton will collect only preliminary information necessary to assess service fit, roster availability, and application eligibility:

• Contact Identification: Full name and primary email address.
• Professional Profile: Public LinkedIn profile URL (optional) to allow specialists to understand past career trajectory.
• Search Criteria: Target job titles or families (e.g., Staff Software Engineer), target compensation range floor, preferred work mode (remote, hybrid, or on-site metro areas).
• Work Authorization Status: Work authorization category (e.g., Citizen, Permanent Resident, or visa eligibility), collected strictly to confirm legal hiring compatibility with target employers.
• Candidate Collateral (Enrolled Clients Only): Master resume, approved exclusion lists (companies not to apply to), and verified answers to standard employer screener questions.

To protect candidate privacy and limit exposure to identity theft risks, CareerButton enforces strict non-collection boundaries. We explicitly refuse to request or store:

Where prospective employer portals mandate SSN digits or official background verification, candidates are provided direct portal instructions to enter such credentials personally.

All data collected will be processed solely for legitimate service purposes:

1. Service Fit Evaluation: Assessing whether a candidate's target roles align with our current specialist capacity and domain expertise.
2. Material Customization: Tailoring resume bullet hierarchy and cover notes based exclusively on candidate-verified historical accomplishments.
3. Candidate-Authorized Submissions: Completing application fields on employer job portals pre-approved by the candidate.
4. Progress Reporting: Generating transparent submission logs and receipt links for candidate inspection.

We never sell, rent, license, or monetize candidate personal information. We do not share candidate data with data brokers, advertising networks, or third-party recruiters.

Candidate data is disclosed to third parties only under the following explicit operational conditions:

• Target Employer Portals: When a candidate authorizes an application, their customized materials and contact information are entered into the prospective employer's hiring system (e.g., Workday, Greenhouse, Lever). Once submitted, handling of that application is governed by the respective employer's privacy policy.
• Infrastructure Providers (Pending Selection): In production, CareerButton will utilize secure cloud hosting and transactional notification services. Formal Data Processing Agreements (DPAs) will be executed with verified infrastructure vendors prior to live launch.

Note: CareerButton does not currently claim adherence to unverified international transfer mechanisms or vendor-specific compliance frameworks until vendor contracts are finalized.

Our security philosophy is rooted in data minimization: the most effective way to protect sensitive data is not to collect it.

Operational security relies on strict role-based access control, ensuring only the assigned human career specialist and QA reviewer can access active client search documents.

Candidates who engage with CareerButton retain sovereign rights over their professional records:

• Right to Inspect: Candidates may request a complete export of all customized resumes, cover letters, and submission receipts created for their search.
• Right to Rectify: Candidates may update or correct career history, target role criteria, or exclusion parameters at any time.
• Right to Deletion: Upon subscription cancellation or request, candidates may ask that their master profile and stored collateral be purged from CareerButton systems, subject to legal record retention requirements.

In compliance with our claims governance register, we document the following privacy and governance decisions as awaiting formal business finalization:

• Corporate Mailbox Provisioning: Dedicated privacy mailbox addresses (e.g., privacy@careerbutton.com) will be activated upon business configuration. Placeholder addresses are omitted from publication.
• Statutory Disclosures: Specific state and regional regulatory notices (such as California Consumer Privacy Act disclosures) will be drafted following formal legal counsel review of the corporate entity.
• Data Retention Windows: Defining exact retention periods for inactive client accounts post-engagement.

Privacy inquiries prior to formal corporate mailbox setup can be submitted via the consultation inquiry page.

CareerButton reserves the right to revise this draft Privacy Policy as operational systems, legal counsel reviews, and commercial partnerships develop. Any revisions will be reflected with an updated version identifier and draft date.

Formal governing law and jurisdiction will be established upon completion of corporate entity registration and will be published prior to commercial launch.